Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
File:                     6216c9cb-a038-37d4-9b6e-66b74218cccb.roa (raw, json)
Hash identifier:          5EZO4b+E+hmiyXQR/PDkSQxyPZtdMz661U9p1XoLWLc=
Subject key identifier:   51:B3:78:56:61:55:9B:80:D4:CE:3F:34:C7:7B:CC:D6:AC:7F:CE:F3
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F432858481F653231B7BB3FD3DEEE3860
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     19257
IP address blocks:        2605:1880::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:32:31:b7:bb:3f:d3:de:ee:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=a29abc45-a42a-4dba-b355-a72e9848b9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:3f:35:70:55:d9:87:9d:c0:d3:f7:0b:45:
                    28:f9:34:fd:ba:e1:9f:3d:7c:91:05:aa:7f:ca:99:
                    6c:76:57:2c:5d:47:c9:76:c7:74:dd:81:24:4c:65:
                    a8:62:03:41:50:b8:e0:bf:e2:b5:a1:f9:8c:cc:77:
                    b3:a9:2f:2f:7c:53:5a:db:82:8d:17:de:f0:b9:a7:
                    b1:79:d2:4c:f2:d3:cb:4c:55:0d:a9:00:b3:99:09:
                    d9:aa:cd:50:6a:07:ab:08:9a:2e:1a:7b:19:9e:a4:
                    35:bf:6f:85:8b:26:7d:45:99:30:82:4c:c0:ba:56:
                    3b:df:06:e9:ed:3b:3c:64:c2:48:0e:ee:54:b2:de:
                    2e:15:08:5e:7f:1d:09:39:ed:c8:61:22:0a:48:e4:
                    53:b8:8f:f1:b5:9a:9e:d1:aa:04:3d:72:13:fa:b0:
                    b6:94:14:ad:17:08:12:e9:90:e5:e7:5d:f8:cd:25:
                    b8:3e:e0:70:9c:1b:7a:25:a0:29:63:f7:8d:61:ff:
                    8a:2e:b9:22:a8:3f:5b:47:e7:29:76:e4:53:93:a5:
                    78:00:31:42:2b:db:b3:37:74:e6:ad:2f:09:0d:cc:
                    41:db:fb:10:45:3b:c5:71:0b:97:46:7e:6c:3f:33:
                    95:81:14:45:97:a8:c1:ed:3b:9d:83:b2:77:3e:66:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:78:56:61:55:9B:80:D4:CE:3F:34:C7:7B:CC:D6:AC:7F:CE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:24:64:f9:9f:a8:1a:8b:7d:16:1c:94:ca:c6:47:70:bd:
         29:3a:94:6a:29:50:bf:07:c4:7a:40:ba:9c:7a:9c:e0:0e:12:
         d3:5a:51:27:b7:eb:57:e8:c3:4e:ad:f9:a5:2d:5f:08:2e:3d:
         00:d8:94:e4:84:5c:7f:ca:51:5d:be:48:08:00:d1:dc:2d:d2:
         58:c7:07:2d:19:02:a7:50:ea:11:53:38:03:aa:e6:c8:1a:2a:
         39:04:da:24:7e:d1:ee:34:2f:8a:42:b1:ae:d9:93:bd:06:e5:
         1f:a4:4b:cf:96:43:db:9e:06:d7:9a:48:5a:5c:9b:4c:24:31:
         97:05:f2:cf:94:7e:c0:aa:8a:0f:8e:02:a6:00:b9:02:22:f5:
         3c:71:9c:d9:97:10:eb:89:83:8d:58:0f:56:3b:55:c1:f8:a9:
         1a:18:65:ed:2e:54:a4:1f:0a:46:0b:d6:bd:02:24:28:bf:64:
         17:4c:14:2d:68:49:a2:9d:db:6e:f5:69:36:cd:f7:d4:2f:98:
         c5:cb:d6:aa:b8:09:68:87:50:4b:de:63:f0:b9:24:fb:cb:b1:
         1f:cf:90:00:81:4c:3f:d7:b3:a6:ae:d5:47:9c:65:83:a2:f0:
         3b:da:f6:e9:89:c4:8d:e4:2c:77:8f:99:26:4c:34:b3:26:6f:
         c9:2c:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:49:55 2025 by rpki-client